SSL and Production Setup Log

[desmond-zhou]

This Issue is to track the deployment activities

[desmond-zhou]

• Created domain name longmenservice.com and set up an A Record within AWS Route 53 at the following URL to direct to our production load balancer:

http://lmshipservice-prod.longmenservice.com/

• AWS now provides free certificates to all US east hosts, moving lmshipservice-prod environment to US East Virginia, additional latency negligible. Devo and staging instance will remain in US West Oregon
• Set up a free certificate for *.longmenservice.com in AWS ACM, which is the automatic certificate management and free as long as you use AWS, and bound it against the new lmshipservice-prod.
• opened the SSL ports on prod ELB and route to our service.
• the SSL URL root is located at:

https://lmshipservice-prod.longmenservice.com/

[desmond-zhou]

Please update all access to use the address

https://lmshipservice-prod.longmenservice.com/

For now I will leave both the HTTP and HTTPS URL open, please let me know this is done. We should disable the normal http://lmshipservice-prod.longmenservice.com/ on port 80 as soon as this is complete.

[desmond-zhou]

I am also wondering if I can remove either the devo or staging environment, this would save some cost if you are not using both.

[LM-Charles]

Makes sense, let's remove the one without the security tokens then.